PT-2025-15619 · Adobe · Animate

Published 2025-04-08 · Updated 2025-04-15 · CVE-2025-27201

Positive Technologies (AI Summary)

CVSS v3.1

5.5

Medium

Base vector

AV:L/AC:L/PR:N/UI:R/S:U/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions: Animate versions 24.0.7, 23.0.10 and earlier

Description: The issue is an out-of-bounds read vulnerability that could lead to disclosure of sensitive memory. An attacker could leverage this vulnerability to bypass mitigations such as ASLR. To exploit this issue, user interaction is required, where a victim must open a malicious file.

Recommendations: For versions 24.0.7 and earlier, update to a version that contains a fix for this issue. For version 23.0.10 and earlier, update to a version that contains a fix for this issue. As a temporary workaround, consider avoiding the use of Animate to open files from untrusted sources until a patch is available.

Fix

Out of bounds Read

Weakness Enumeration

CWE-125

Related Identifiers

BDU:2025-05457

CVE-2025-27201

Affected Products

Animate

References · 6

• https://nvd.nist.gov/vuln/detail/CVE-2025-27201 · Security Note
• https://helpx.adobe.com/security/products/animate/apsb25-31.html · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-27201 · Vendor Advisory
• https://bdu.fstec.ru/vul/2025-05457 · Security Note
• https://twitter.com/dailycve/status/1912251232007102957 · Twitter Post
• https://twitter.com/CVEnew/status/1909906933189837184 · Twitter Post